
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier: oZzrjWp2Vuz7fosePU11Z4+xywJJRdVVf2np0dKICeY=
Subject key identifier: 42:47:17:4F:47:04:CD:3A:89:D1:24:B5:53:57:E6:41:3B:BB:EC:88
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 06:57:24 +0000
Manifest this update: Wed 23 Sep 2026 06:57:23 +0000
Manifest next update: Wed 30 Sep 2026 06:57:23 +0000
Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: /HJOpa32pGfg3sxUH2sVGKT+3bPht2Vt5iRmSRMRGrI=)
2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: 0tN4Gj5sk7CFRdHhGb+Lg4sMucT1D275bB7PbKONwhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Validity
Not Before: Sep 23 06:57:23 2026 GMT
Not After : Sep 30 06:57:23 2026 GMT
Subject: CN=6ab37854-9ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:11:2a:64:e8:9f:f3:04:3a:91:4a:e6:5a:
ca:5a:fb:4f:db:c8:9d:7f:e9:92:d0:35:70:3c:5a:
1a:13:3c:c3:4e:57:8c:24:bf:20:3a:a7:7a:26:fb:
48:af:c3:f5:43:42:c6:57:74:c6:0f:4e:65:1d:b1:
f4:86:70:c0:cd:fc:ed:02:da:56:d1:6e:1d:24:f0:
02:f8:0b:b6:10:59:a0:a3:c8:c3:57:3e:4c:26:54:
d3:84:c5:0e:27:b6:7e:cf:69:e6:27:21:d2:87:e7:
81:f8:28:6c:b2:19:69:8c:eb:b2:59:a0:45:fd:2f:
ee:80:e6:6a:15:e3:78:1d:e0:81:5b:46:08:2d:53:
54:51:1a:84:f6:ee:7e:c2:d7:59:41:14:82:0b:4c:
10:39:f6:6f:1e:72:5e:15:bc:36:56:b6:ec:2d:5d:
32:15:2b:2e:05:06:1d:7c:b9:50:4f:e5:17:e5:37:
94:79:08:20:12:0d:1c:0b:48:f3:8d:c0:2c:a1:7b:
b3:30:0c:5d:1d:30:3d:a7:1f:48:bc:4a:38:a2:d4:
d7:98:b2:e6:a4:18:c2:42:99:45:9a:f6:e7:38:ff:
06:4e:9c:14:03:3f:a8:ee:a4:18:f5:36:b7:40:e3:
ac:9c:db:e9:de:08:84:77:d5:e0:3b:bb:fe:89:02:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:17:4F:47:04:CD:3A:89:D1:24:B5:53:57:E6:41:3B:BB:EC:88
X509v3 Authority Key Identifier:
keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:93:73:68:f7:74:61:2b:44:f2:5b:b5:4e:34:e6:47:1b:
e3:ba:db:5b:a1:51:af:23:6b:12:7f:2e:a3:20:aa:6e:c4:06:
07:41:89:04:aa:f9:b5:ae:a0:7b:f4:18:65:bb:d3:80:2c:f3:
99:b4:08:53:a3:29:34:bd:fb:0c:44:69:7e:d9:c4:fd:c6:85:
06:66:4a:80:ac:ab:88:3a:0a:03:96:b9:33:9d:c3:98:50:a2:
41:06:8e:ae:1c:39:38:ec:4b:a6:16:4b:1b:bb:30:b5:a9:97:
d0:e7:8e:90:b4:cf:7b:11:07:9b:09:b2:aa:e9:de:88:11:51:
2e:cd:5a:aa:32:4a:88:13:b2:54:28:68:2c:fd:cf:90:30:22:
0e:3a:28:91:2c:0e:3d:0d:e4:01:b0:b2:f3:3f:85:79:24:85:
99:c3:bb:ce:8c:70:0b:2a:24:07:36:21:fd:c1:6b:8f:5e:ad:
85:5c:89:4f:f4:fb:4e:f8:1f:04:9c:cc:4d:96:b2:b0:5d:ca:
53:74:e6:a2:28:cf:72:0a:17:44:b1:05:18:9a:ba:bf:01:ac:
b4:78:c0:b2:0a:a8:e4:4c:bf:b7:0a:5d:bd:17:6c:de:5e:f6:
06:ee:af:0e:9f:b3:1f:37:ba:e0:b5:1c:6e:59:78:06:a4:a8:
03:be:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:06:42 2026 by rpki-client